Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: /IaEmAJwMpmHv+p5HbfPkcAjPRHZYnTMEiRaGRrIuhI=
Subject key identifier: 4A:68:A7:99:7B:AB:A2:5B:89:89:05:35:C9:2F:73:08:D0:DB:42:33
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019A71EE6AC90FE023F97ED983BC842FC3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0C2E
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: IQfRql69hdt6DMq7jCrw15iiX8/hA/M9HLTs/vNiRYw=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6a:c9:0f:e0:23:f9:7e:d9:83:bc:84:2f:c3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=4a68a7997baba25b89890535c92f7308d0db4233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:e8:30:9f:1c:fb:50:5f:a9:55:fd:0b:0d:
cd:07:28:c5:29:1f:dd:47:cd:5d:ef:1d:78:80:6c:
6f:da:aa:d3:9f:b9:08:dc:08:bf:75:45:7a:13:fa:
aa:f1:0d:6f:fa:5e:51:66:af:28:06:bf:a7:91:d6:
89:9b:ff:1b:90:70:52:4d:1b:fa:87:ff:ba:8e:92:
66:b1:f9:b9:24:37:66:11:56:d3:51:3f:89:eb:c7:
f0:4f:85:32:91:05:43:00:84:cc:3d:81:eb:72:99:
c7:e8:d6:af:75:16:8a:dc:bc:27:f6:25:19:56:b2:
97:cc:e5:4e:8a:98:7c:21:58:c6:c2:fe:cc:d3:58:
51:2a:b2:da:74:97:aa:e3:70:18:b6:83:1a:75:02:
d8:40:96:a3:cb:54:80:60:43:c5:e6:c0:76:dc:ec:
22:8a:5c:f4:9d:a6:cf:31:90:2f:c5:af:ad:a1:34:
c9:e8:73:f9:ff:96:f2:1e:df:c4:6f:6a:1c:59:99:
bf:f8:78:b5:99:db:dc:19:bb:23:cc:68:44:a7:7d:
89:da:d0:27:ca:6d:d3:e6:6b:ec:2d:8c:e0:62:d2:
77:94:f6:ba:38:1e:28:10:61:69:59:73:0c:a1:db:
76:fb:54:0a:69:6e:8d:2d:fe:0d:b9:32:25:ed:66:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:A7:99:7B:AB:A2:5B:89:89:05:35:C9:2F:73:08:D0:DB:42:33
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:3b:7b:ac:ae:94:bc:70:9e:73:bb:c9:65:73:3a:c8:0b:
46:97:77:84:0e:c9:e8:5e:79:6f:1f:d7:98:90:f3:a9:61:36:
35:8c:bb:c8:cf:e3:ab:6b:0f:19:a6:f6:53:39:ba:d1:b6:89:
d6:68:5e:00:14:3f:49:d4:48:41:38:2d:6b:55:e6:5b:10:35:
71:d4:b0:86:57:ec:eb:58:6d:89:1c:b0:bc:df:85:73:74:16:
e0:10:a9:ae:b8:dd:55:5a:e2:d6:b4:5c:d0:8d:ed:5b:b8:92:
24:90:19:11:72:8b:07:cb:42:df:a5:94:43:9e:f4:e4:ca:b5:
32:29:52:63:fc:4b:ca:6d:23:63:9b:de:2f:2d:da:3b:22:ce:
df:e2:b2:16:44:0b:02:94:63:d7:a1:ed:a2:e4:23:83:65:fc:
7b:5e:b6:da:5e:d4:e8:7c:d8:9d:d9:0c:ec:a0:ca:3a:a5:1c:
cf:47:18:ae:8b:81:75:3a:ca:df:d6:26:8f:35:95:43:63:3b:
89:95:d0:1f:5e:90:2d:4c:75:aa:9a:2a:25:6a:52:f8:bc:d7:
4f:68:6f:34:6a:23:c0:2c:91:71:41:13:36:49:bb:3d:93:98:
a9:eb:16:15:90:b6:26:88:91:36:6f:01:9f:69:d4:ea:5e:98:
a2:7e:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:37 2025 by rpki-client